NPM sucks for a solo dev

i spend every week doing something that has absolutely nothing to do with putting out good content for my blog.
i am fixing a transitive dependency vulnerability in a package i didn’t even know i was using.
for a solo developer, the javascript ecosystem can feel like a full-time job. it’s a treadmill that never stops, and if you step off it, a dependabot alert will politely tap you on the shoulder to inform you that your site is now insecure because of a micro-package that left-pads strings.